{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:6ID5FDGHBOSLVTJX5PS5CI4SDQ","short_pith_number":"pith:6ID5FDGH","canonical_record":{"source":{"id":"2308.16684","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CR","submitted_at":"2023-08-31T12:38:29Z","cross_cats_sorted":["cs.AI","cs.CV","cs.LG"],"title_canon_sha256":"b23508318d1185091788985d0cb677536ec15676694fa039ae8d3d1a383470f0","abstract_canon_sha256":"462cb8841885ac5fba474e7c1221671c5a837f7b5dc148c200b853cc7e1ed8b7"},"schema_version":"1.0"},"canonical_sha256":"f207d28cc70ba4bacd37ebe5d123921c2c37d91270748110138f894d1bd2fb7f","source":{"kind":"arxiv","id":"2308.16684","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2308.16684","created_at":"2026-07-05T06:47:28Z"},{"alias_kind":"arxiv_version","alias_value":"2308.16684v2","created_at":"2026-07-05T06:47:28Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2308.16684","created_at":"2026-07-05T06:47:28Z"},{"alias_kind":"pith_short_12","alias_value":"6ID5FDGHBOSL","created_at":"2026-07-05T06:47:28Z"},{"alias_kind":"pith_short_16","alias_value":"6ID5FDGHBOSLVTJX","created_at":"2026-07-05T06:47:28Z"},{"alias_kind":"pith_short_8","alias_value":"6ID5FDGH","created_at":"2026-07-05T06:47:28Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:6ID5FDGHBOSLVTJX5PS5CI4SDQ","target":"record","payload":{"canonical_record":{"source":{"id":"2308.16684","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CR","submitted_at":"2023-08-31T12:38:29Z","cross_cats_sorted":["cs.AI","cs.CV","cs.LG"],"title_canon_sha256":"b23508318d1185091788985d0cb677536ec15676694fa039ae8d3d1a383470f0","abstract_canon_sha256":"462cb8841885ac5fba474e7c1221671c5a837f7b5dc148c200b853cc7e1ed8b7"},"schema_version":"1.0"},"canonical_sha256":"f207d28cc70ba4bacd37ebe5d123921c2c37d91270748110138f894d1bd2fb7f","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T06:47:28.401223Z","signature_b64":"TbBIcw5DhRbJjeJwWLR0XHVbqBTgAV0J4Y8JkYR40hZy+lrXK3XQNIayIcbaaLhxEWKIDTnOgLMI+MbyaIvLCg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"f207d28cc70ba4bacd37ebe5d123921c2c37d91270748110138f894d1bd2fb7f","last_reissued_at":"2026-07-05T06:47:28.400723Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T06:47:28.400723Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2308.16684","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T06:47:28Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"DgeZTpcyUwHa5NG61tfGQEowHp2idBfcx4Dr/lpaKXWeDu6z97nA6xlbsCNtcGAemMTr4u0TkLJzWlixmRVPBQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-11T18:14:33.795353Z"},"content_sha256":"40c1f12f548e99baf9fd5114fdd27db9694020e2205abbf7f88895a715ce3016","schema_version":"1.0","event_id":"sha256:40c1f12f548e99baf9fd5114fdd27db9694020e2205abbf7f88895a715ce3016"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:6ID5FDGHBOSLVTJX5PS5CI4SDQ","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Everyone Can Attack: Repurpose Lossy Compression as a Natural Backdoor Attack","license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","headline":"","cross_cats":["cs.AI","cs.CV","cs.LG"],"primary_cat":"cs.CR","authors_text":"Chee Seng Chan, Khoa D. Doan, Quang Nguyen, Sze Jue Yang","submitted_at":"2023-08-31T12:38:29Z","abstract_excerpt":"The vulnerabilities to backdoor attacks have recently threatened the trustworthiness of machine learning models in practical applications. Conventional wisdom suggests that not everyone can be an attacker since the process of designing the trigger generation algorithm often involves significant effort and extensive experimentation to ensure the attack's stealthiness and effectiveness. Alternatively, this paper shows that there exists a more severe backdoor threat: anyone can exploit an easily-accessible algorithm for silent backdoor attacks. Specifically, this attacker can employ the widely-us"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2308.16684","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2308.16684/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T06:47:28Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"PO1f7Laz3Vt2sfOl1CZLwoBOyV8KVFDm4ubISJeMJlObVIHWDO7fL293wH6WQPv1wTkWqCiqHwkeUoJD2LeTAQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-11T18:14:33.795743Z"},"content_sha256":"7d2c07293b8eed296b3eeba9bebde403786c3df8d179e5259cd0c0c98520ee89","schema_version":"1.0","event_id":"sha256:7d2c07293b8eed296b3eeba9bebde403786c3df8d179e5259cd0c0c98520ee89"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/6ID5FDGHBOSLVTJX5PS5CI4SDQ/bundle.json","state_url":"https://pith.science/pith/6ID5FDGHBOSLVTJX5PS5CI4SDQ/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/6ID5FDGHBOSLVTJX5PS5CI4SDQ/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-11T18:14:33Z","links":{"resolver":"https://pith.science/pith/6ID5FDGHBOSLVTJX5PS5CI4SDQ","bundle":"https://pith.science/pith/6ID5FDGHBOSLVTJX5PS5CI4SDQ/bundle.json","state":"https://pith.science/pith/6ID5FDGHBOSLVTJX5PS5CI4SDQ/state.json","well_known_bundle":"https://pith.science/.well-known/pith/6ID5FDGHBOSLVTJX5PS5CI4SDQ/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:6ID5FDGHBOSLVTJX5PS5CI4SDQ","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"462cb8841885ac5fba474e7c1221671c5a837f7b5dc148c200b853cc7e1ed8b7","cross_cats_sorted":["cs.AI","cs.CV","cs.LG"],"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CR","submitted_at":"2023-08-31T12:38:29Z","title_canon_sha256":"b23508318d1185091788985d0cb677536ec15676694fa039ae8d3d1a383470f0"},"schema_version":"1.0","source":{"id":"2308.16684","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2308.16684","created_at":"2026-07-05T06:47:28Z"},{"alias_kind":"arxiv_version","alias_value":"2308.16684v2","created_at":"2026-07-05T06:47:28Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2308.16684","created_at":"2026-07-05T06:47:28Z"},{"alias_kind":"pith_short_12","alias_value":"6ID5FDGHBOSL","created_at":"2026-07-05T06:47:28Z"},{"alias_kind":"pith_short_16","alias_value":"6ID5FDGHBOSLVTJX","created_at":"2026-07-05T06:47:28Z"},{"alias_kind":"pith_short_8","alias_value":"6ID5FDGH","created_at":"2026-07-05T06:47:28Z"}],"graph_snapshots":[{"event_id":"sha256:7d2c07293b8eed296b3eeba9bebde403786c3df8d179e5259cd0c0c98520ee89","target":"graph","created_at":"2026-07-05T06:47:28Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2308.16684/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"The vulnerabilities to backdoor attacks have recently threatened the trustworthiness of machine learning models in practical applications. Conventional wisdom suggests that not everyone can be an attacker since the process of designing the trigger generation algorithm often involves significant effort and extensive experimentation to ensure the attack's stealthiness and effectiveness. Alternatively, this paper shows that there exists a more severe backdoor threat: anyone can exploit an easily-accessible algorithm for silent backdoor attacks. Specifically, this attacker can employ the widely-us","authors_text":"Chee Seng Chan, Khoa D. Doan, Quang Nguyen, Sze Jue Yang","cross_cats":["cs.AI","cs.CV","cs.LG"],"headline":"","license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CR","submitted_at":"2023-08-31T12:38:29Z","title":"Everyone Can Attack: Repurpose Lossy Compression as a Natural Backdoor Attack"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2308.16684","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:40c1f12f548e99baf9fd5114fdd27db9694020e2205abbf7f88895a715ce3016","target":"record","created_at":"2026-07-05T06:47:28Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"462cb8841885ac5fba474e7c1221671c5a837f7b5dc148c200b853cc7e1ed8b7","cross_cats_sorted":["cs.AI","cs.CV","cs.LG"],"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CR","submitted_at":"2023-08-31T12:38:29Z","title_canon_sha256":"b23508318d1185091788985d0cb677536ec15676694fa039ae8d3d1a383470f0"},"schema_version":"1.0","source":{"id":"2308.16684","kind":"arxiv","version":2}},"canonical_sha256":"f207d28cc70ba4bacd37ebe5d123921c2c37d91270748110138f894d1bd2fb7f","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"f207d28cc70ba4bacd37ebe5d123921c2c37d91270748110138f894d1bd2fb7f","first_computed_at":"2026-07-05T06:47:28.400723Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T06:47:28.400723Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"TbBIcw5DhRbJjeJwWLR0XHVbqBTgAV0J4Y8JkYR40hZy+lrXK3XQNIayIcbaaLhxEWKIDTnOgLMI+MbyaIvLCg==","signature_status":"signed_v1","signed_at":"2026-07-05T06:47:28.401223Z","signed_message":"canonical_sha256_bytes"},"source_id":"2308.16684","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:40c1f12f548e99baf9fd5114fdd27db9694020e2205abbf7f88895a715ce3016","sha256:7d2c07293b8eed296b3eeba9bebde403786c3df8d179e5259cd0c0c98520ee89"],"state_sha256":"abbc95b26880470cba65274879de02785ecfbad9155653d3c6cc05fafe8d4b24"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"sxeUFPRJCqq0/x6hemRDVODpHBUxGDzuYFUToRGw2UYE6kqHbggola/QBDNWHg4jorUPZcI3z7Uv/aOnsjLyBA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-11T18:14:33.798138Z","bundle_sha256":"bd1cd25419b2a73a6738a8b6f681a99b4a2bf8339a2e40036e3b877792175d89"}}